[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#665638: prevent debootstrap vom needing SHA256sums




On Sat, Mar 24, 2012 at 05:35:36PM -0400, Joey Hess wrote:
> > Mario Koppensteiner wrote:
> Am I correct in deducing that this mirror is one that was actually
> generated with apt-move, and that's why it's missing the SHA256 fields?

Yes, you are correct.

> > Can somebody please implement a parameter which tells debootstrap not
> > to relly on SHA256sums and use MD5sums instead?
> 
> Well, that would be insecure. Better to fix the mirror?

Yes, I tried to fix the mirror but I don't unterstand the awk script
included in apt-move. See bug [1]. Maybe someone of the Debian Installer
Team can help and fix the awk script?

Related to bug [1], I got a reply there asking if the md5sums are still
neded somewhere in the debian mirror. On the official Debian Mirror I can
still see MD5sum. Can someone of the Debian Installer Team reply to the
post on bug [1] please?

Links:
[1] http://bugs.debian.org/662003

sincerely yours

Mario

Attachment: signature.asc
Description: Digital signature


Reply to: